Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
File: XpgU1DFdMK28jeMGAFVq6cPPns4.mft (raw, json)
Hash identifier: OUeQv5F3gLsY54GI1mUyHAj/08FmT4Sry3kssqWnZkc=
Subject key identifier: 55:D4:1C:CC:4D:23:D3:94:4F:EF:4A:90:7A:00:11:90:9B:95:01:BA
Authority key identifier: 5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
Certificate issuer: /CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Certificate serial: 019F91DACEF36B5386128A502AC8B6EAD3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:01:03 +0000
Manifest this update: Fri 24 Jul 2026 02:01:03 +0000
Manifest next update: Sat 25 Jul 2026 02:01:03 +0000
Files and hashes: 1: QBinzFbTX8ICJKPb335BTjaNXKk.roa (hash: phGs/IfWO4O9NiG9zthPXCYOMupHdBQa3yN7pRaGe2k=)
2: XpgU1DFdMK28jeMGAFVq6cPPns4.crl (hash: O2dUNOmkAU9w0fedGdGjnoz4LYmVbyjGuGCqX99yhIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:ce:f3:6b:53:86:12:8a:50:2a:c8:b6:ea:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9814d4315d30adbc8de30600556ae9c3cf9ece
Validity
Not Before: Jul 24 02:01:03 2026 GMT
Not After : Jul 25 02:01:03 2026 GMT
Subject: CN=55d41ccc4d23d3944fef4a907a0011909b9501ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:85:10:ca:9b:08:bd:57:67:c1:df:4d:e5:
80:d3:48:3e:05:e9:07:e9:44:f0:e4:cf:3b:38:9e:
61:fd:90:b4:35:ae:5d:47:02:e2:b3:30:8b:3a:72:
95:90:df:7e:ad:8f:43:8d:c6:48:c6:25:64:99:34:
cc:4f:47:c9:2f:f8:eb:a3:95:a3:c3:6a:95:ce:04:
35:a9:fc:cc:ca:ef:21:73:11:ee:2d:61:74:7e:cf:
54:87:69:af:0f:fa:13:5c:46:66:91:c3:1a:cd:de:
dc:57:66:62:bf:7d:17:73:19:49:a1:67:83:82:c0:
d5:13:0c:a9:b8:ca:7a:56:93:25:9d:77:90:1c:de:
2d:db:14:c4:42:80:cb:20:5c:cf:75:09:1b:89:45:
90:bf:89:0f:ef:dd:32:ef:8f:7a:f2:b1:24:70:17:
0f:df:51:aa:2a:85:01:fd:bd:7e:00:3e:06:97:45:
3a:79:84:07:e1:a4:0f:84:80:17:26:b2:1d:6f:2e:
4e:74:ff:65:37:37:83:4d:ce:19:2d:7c:9e:7d:b3:
e2:53:6a:f8:a7:47:f7:6d:1f:10:15:04:46:50:ba:
d7:21:58:01:f6:ea:ef:66:f9:e6:b1:c2:e4:6b:fb:
44:b8:e2:41:88:35:db:f8:3f:c9:ad:70:4e:f6:b5:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D4:1C:CC:4D:23:D3:94:4F:EF:4A:90:7A:00:11:90:9B:95:01:BA
X509v3 Authority Key Identifier:
keyid:5E:98:14:D4:31:5D:30:AD:BC:8D:E3:06:00:55:6A:E9:C3:CF:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpgU1DFdMK28jeMGAFVq6cPPns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7a78d4-0340-4227-b147-35b53d2376d2/1/XpgU1DFdMK28jeMGAFVq6cPPns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:d8:19:f7:7a:24:d9:33:9d:fe:c8:e4:a6:91:be:8b:7a:
c5:31:d9:3a:3d:a8:c6:86:5a:79:32:45:53:21:2c:1b:9c:f9:
7f:43:ed:9f:d2:e9:76:ce:22:4d:35:b8:24:35:80:54:05:6c:
54:b2:06:33:5c:ae:4f:ca:b4:5d:90:a4:ff:33:7a:d7:a6:a6:
f7:b4:0b:d4:c9:70:eb:cf:43:7d:f5:ad:a1:6d:ab:34:c7:9e:
3c:2a:dd:e6:6b:a3:fc:ba:cb:0b:80:73:de:85:b7:ed:cf:d0:
78:c8:45:2e:9c:5f:04:3d:8c:22:28:3d:e1:5b:82:fb:46:f9:
1d:a5:5c:f1:ed:42:50:9e:ec:9c:36:58:61:3b:1d:78:5a:20:
e6:a3:47:1f:dc:01:f6:47:4d:56:77:a1:1f:e8:a0:cb:73:5d:
6e:6d:96:bd:91:a9:85:f9:97:43:63:c4:00:3e:04:f7:54:85:
ad:e5:b5:09:13:a2:77:b6:36:e1:22:3b:e8:31:56:0c:6a:10:
74:dd:db:ed:1c:a2:e7:3e:fa:f5:2a:d3:0a:8f:9c:20:98:9c:
6e:d2:00:96:d2:28:d5:8f:7f:31:3e:f4:aa:27:d4:15:38:56:
b7:61:ab:85:0c:3c:81:2e:03:ed:d9:37:03:b9:f6:9d:b1:bd:
ee:0a:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:22:42 2026 by rpki-client